LayoutTests/editing/undo/undo-paste-when-caret-is-not-in-range.html

<div id="edit" contentEditable="true">abc </div>
<script>
if (window.testRunner)
    window.testRunner.dumpAsText();
edit = document.getElementById("edit");
var s = window.getSelection();
s.setPosition(edit, 3);
document.execCommand("InsertText", false, " ");
s.setBaseAndExtent(edit.firstChild, 0, edit.firstChild, 3);
document.execCommand("Copy");
document.execCommand("InsertText", false, "def");
s.setBaseAndExtent(edit.firstChild, 0, edit.firstChild, 3);
document.execCommand("Paste");
s.setPosition(edit, 4);
document.execCommand("Undo");
document.body.innerHTML = "<div>This tests an assertion failure when undoing a paste operation when the caret is outside of the range to be undone. This test should not crash with debug build.</div>";
</script>